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Top Stories 

• The California Public Utilities Commission agreed August 14 to penalize Southern 
California Edison $24.5 million for safety violations in a 201 1 windstorm that knocked out 
power to 440,000 customers and caused a power line failure that electrocuted three 
individuals. - Associated Press (See item 1) 

• Authorities closed both directions of Interstate 65 in Franklin, Tennessee, for 3 hours 
August 15 after a tanker truck ran into an overpass bridge support column and burst into 
flames, killing the driver and damaging two bridges and requiring them to be closed for 
months. - Nashville The Tennessean (See item 9) 

• A state of emergency for residents in the city of New London, Connecticut, was lifted 1 1 
hours after a water main break that leaked approximately 8,000 to 10,000 gallons of water 
per minute was repaired August 14. - WTIC 61 Hartford (See item 18) 

• A man admitted August 14 to stealing over 500 pounds of explosives from a U.S. Forest 
Service bunker near Red Lodge, Montana, in April 2013. - Billings Gazette (See item 21) 
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Energy Sector 

1. August 14, Associated Press - (California) California regulators approve $24.5M 
penalty against Edison for 2011 outages, electrocutions. The California Public 
Utilities Commission agreed August 14 to penalize Southern California Edison $24.5 
million for safety violations in a 2011 windstorm that knocked out power to 440,000 
customers and caused a power line failure that electrocuted three individuals. The 
utility agreed to the penalty in March after an investigation determined they gave 
inaccurate information on power restoration and safety standards. 

Source: http://www.foxbusiness.com/markets/2014/08/14/california-regulators- 
approve-245m-penalty-against-edison-for-20 11 -outages/ 
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Chemical Industry Sector 

See item 11 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. August 14, Cars.com - (National) Ford recalls crossovers, big sedans for power loss. 
Ford announced a recall for over 83,000 model year 2012-2014 Ford Edge and Fincoln 
MKX; 2013-2014 Ford Taurus and Fincoln MKS; and 2013-2014 Ford Flex and 
Fincoln MKT vehicles due to a halfshaft retention circlip that may not have been 
properly installed and could allow the halfshaft to move and disengage from the 
linkshaft while driving, causing power to no longer be transmitted to the wheels. An 
additional issue could cause the vehicles to roll away if the parking brake is not applied 
when the transmission is in ‘park.’ 

Source: http://www.usatoday.com/storv/monev/cars/2014/08/14/ford-edge-taurus-flex- 
lincoln-mkx-mks-mkt-recall/1407 1 805/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



3. August 15, Securityweek - (International) New Bugat malware uses HTML injections 
taken from Gameover Zeus. A researcher from IBM Security reported August 14 that 
a new variant of the Bugat financial malware (also known as Cridex or Geodo) was 
spotted infecting computers in the U.K. and the Middle East region. The new variant 
uses HTML injections and scripts and an attack structure similar to that used by the 
Gameover Zeus malware and attempts to redirect victims to fake financial institution 
Web sites in order to steal login information. 

Source: http://www.securitvweek.com/new-bugat-malware-uses-html-iniections-taken- 
gameover-zeus 

4. August 15, IDG News Service - (International) Official at digital currency service 
pleads guilty to money laundering. A Costa Rican national pleaded guilty in U.S. 
District Court on charges related to his role in the operation of digital currency service 
Liberty Reserve that was shut down by the U.S. Department of Justice for allegedly 
laundering $6 billion in funds from various illicit activities. A Liberty Reserve co- 
founded previously pleaded guilty and charges are being pursued against others 
involved in the service. 

Source: http://www.networkworld.com/article/2465882/official-at-digital-currency- 
service-pleads-guiltv-to-money-laundering.html 

5. August 14, Reuters - (National) SEC charges Linkbrokers in $18 million securities 
fraud scheme. New York-based brokerage firm Linkbrokers Derivatives LLC agreed 
August 14 to pay $14 million to settle U.S. Securities and Exchange Commission 
charges that the firm defrauded customers of over $18 million by charging fees much 
larger than represented in over 36,000 transactions between 2005 and 2009. Lour 
brokers at the firm were previously charged, with three agreeing to settle the charges 
for around $4 million. 

Source: http://www.reuters.com/article/2014/Q8/14/us-sec-linkbrokers- 
idUSKBN0GE21J20140814 

6. August 14, Softpedia - (International) New Gameover Zeus botnet forming, the US 
sees most infections. Arbor Networks researchers observed two new variants of the 
Gameover Zeus financial malware using 8,494 IP addresses to attempt to connect to 
command and control (C&C) servers in July in order to build a new botnet after a law 
enforcement and industry takedown of the original botnet. The new variants no longer 
use the peer-to-peer (P2P) command and control architecture of the original and instead 
utilize a domain generation algorithm (DGA) to contact C&C servers. 

Source: http://news.softpedia.com/news/New-Gameover-Zeus-Botnet-Porming-the-US- 
Sees-Most-Infections-455 1 12.shtml 

7. August 14, Memphis Flyer - (Tennessee) Huge credit card fraud lab uncovered. The 
Shelby County Sheriffs Office, U.S. Secret Service, and U.S. Marshals Service 
executed search and arrest warrants on an alleged payment card fraud lab in Millington 
August 13 and seized 84 credit and gift cards and several skimming devices, blank 
cards, and documents containing personal information. Two suspects were also arrested 
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during the search and an investigation is ongoing. 

Source: http://www.memphisflyer.com/NewsBlog/archives/2014/08/14/huge-credit- 
card-fraud-lab-uncovered 



8. August 14, SC Magazine - (National) Vitamin seller website attacked, payment 
cards and other info compromised. Vitamin seller TheNaturalOnline.com reported 
August 12 that an undisclosed number of their customers may have had their payment 
and personal information compromised during a breach of the company’s systems that 
was identified July 15. The information included names, addresses, email addresses, 
account passwords, phone numbers, and payment card numbers, expiration dates, and 
CVV codes. 

Source: http://www.scmagazine.com/vitamin-seller-website-attacked-payment-cards- 
and-other-info-compromised/article/366314/ 
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Transportation Systems Sector 

9. August 15, Nashville The Tennessean - (Tennessee) 1-65 bridge closed for months 
after Franklin tanker explosion kills truck driver. Authorities closed both directions 
of Interstate 65 from State Route 840 to Highway 96 in Franklin for 3 hours August 15 
after a tanker truck carrying unleaded gasoline ran into an overpass bridge support 
column and burst into flames, killing the driver. Officials stated that the Peytonsville 
Road bridge and a new bridge under construction alongside the existing bridge will be 
closed and construction set on the new bridge delayed for months due to the damage. 
Source: http://www.tennessean.com/storv/news/local/williamson/2014/08/15/franklin- 
tanker-explosion-65/14097717/ 

10. August 15, Associated Press; Biloxi Sun Herald - (Mississippi) 3 injured in plane 
crash in Stone County, Miss. A single-engine plane crashed in Wiggins in Stone 
County August 14 while attempting to land in a field off Mississippi 29, injuring all 
three people on board. 

Source: http://bavtownsun.com/texas ap/article ff060f53-dd42-5c84-aa4e- 
cf610b70e465.html 

11. August 14, Twin Falls Times-News - (Idaho) 1-84 re-opens after 2 semis collide; 
hazardous chemicals cleaned up. Eastbound lanes of Interstate 84 in Twin Falls 
reopened August 14 while westbound lanes reopened 2 hours after a refrigerated semi- 
truck carrying onions rear-ended another semi-truck that blew a tire and was carrying 
more than 46,000 pounds of sodium aluminate solution August 13. Crews cleared the 
scene and transported one driver to an area hospital for burns and other injuries. 

Source: http://magicvallev.com/news/local/update-i— closed-after-two-semis-collide- 
one-carrying/article 43d01a4a-2360-l Ie4-a442-001a4bcf887a.html 

12. August 14, WHDH 7 Boston - (Massachusetts) One person injured when giant wave 
hits Boston-bound ferry. The Provincetown IV ferry remained on the water near 
Scituate for several hours August 13 when the vessel was struck by a large wave that 
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shattered several windows and disabled both engines. The ferry was escorted back to 
Boston Harbor and one person was transported to an area hospital with injuries. 
Source: http://www.whdh.com/storv/26273882/ferrv-from-provincetown-disabled- 
near-scituate 



13. August 14, KFMB 8 San Diego - (California) Cesar Chavez Pkwy reopened after 
train derailment. Four cars on a Burlington Northern Santa Fe freight train derailed at 
Cesar Chavez Parkway in San Diego August 13 prompting authorities to close a portion 
of the roadway for nearly 12 hours while crews worked to clean up the scene by August 
14. 

Source: http://www.cbs8.com/storv/26276520/freight-train-derails-in-south-bay 
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Food and Agriculture Sector 

14. August 14, Food Safety News - (National) CDC: Outbreak linked to Organic 
Sprouted Chia Powder produced three Salmonella strains. The Centers for Disease 
Control and Prevention (CDC) issued a report on a Salmonella outbreak linked to 
Organic Sprouted Chia Powder that sickened 31 people in 16 States. The report stated 
that the outbreak appears to be over and was unusual in that there were three strains of 
Salmonella in the single outbreak. 

Source: http://www.foodsafetvnews.com/2014/08/outbreak-linked-to-organic-sprouted- 
chia-powder-results-in-three-salmonella-strains 

15. August 13, WNEP 16 Scranton - (Pennsylvania) Explosion, leak at brewery prompts 
evacuation. HAZMAT crews responded to The Lion Brewery in Wilkes-Barre August 
13 due to an ammonia leak and explosion inside the building that was sparked by a leak 
in a tank. The building was evacuated and one worker was transported to an area 
hospital with injuries. 

Source: http://wnep.com/2014/08/13/explosion-leak-at-brewery-prompts-evacuation/ 
For additional stories, see items 8, 11, and 29 
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Water and Wastewater Systems Sector 

16. August 15, Washington Post - (Maryland) Boil- water advisory lifted for southern 
Prince George’s County. The Washington Suburban Sanitary Commission lifted a 
precautionary boil-water advisory and urged customers to flush facets in southern 
Prince George’s County August 15 after water tests appeared negative for 
contamination. The precautionary boil order was issued August 12 due to a break in a 
12-inch water main in Brandywine. 

Source: http://www.washingtonpost.com/local/boil-water-advisorv-lifted-for-southern- 

prince-georges-county/2014/08/15/c6b89cc0-246e-lle4-86ca- 

6f03cbdl5cla story.html 
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17. August 15, NJ.com - (New Jersey) Rockaway River fuel spill: Cleanup to continue 
for several more days. Authorities in Morris County continued cleanup efforts in the 
Rockaway River in New Jersey August 15 after more than 400 gallons of fuel spilled 
from a Finch Fuel Oil delivery truck while it was transferring diesel to the Montville 
fuel station’s underground storage tank August 12. Authorities believe the spill spread 
over 2 miles and saturated a small amount of soil. 

Source: 

http://www.ni.com/morris/index.ssf/2014/08/rockaway river fuel spill cleanup to co 
ntinue for several more days.html 

18. August 14, WTIC 61 Hartford - (Connecticut) New London water restored. A state of 
emergency for residents in the city of New London was lifted 1 1 hours after a water 
main break was repaired August 14, that caused the water pressure to drop and leaked 
approximately 8,000 to 10,000 gallons of water per minute. 

Source: http://foxct.com/2014/08/14/massive-water-leak-in-new-london-could-impact- 
thousands/ 
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Healthcare and Public Health Sector 

19. August 14, KUSA 9 Denver - (Colorado) Morton Bowen evacuated after bad 

chemical reaction. Morton Bowen, a medical manufacturing company in Broomfield, 
was evacuated August 13 after an employee accidentally mixed two chemicals in a 
drum, causing a small reaction producing a cloud of vapor. Technicians spent several 
hours testing air quality before deeming the entire building safe. 

Source: http://www.9news.com/storv/news/health/2014/08/14/chemical-reaction- 
morton-bowen-evacuation-industrial-lane/14074705/ 
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Government Facilities Sector 

20. August 15, Omaha World-Herald - (Nebraska) Driver killed in collision with school 
bus identified. A collision between a truck and an East Butler Public Schools bus in 
southwest Saunders County killed the driver of the truck and left two other passengers 
injured August 14. Eleven students were taken to area hospitals as a precaution while 
investigators worked to determine the cause of the crash. 

Source: http://www.omaha.com/news/nebraska/driver-killed-in-collision-with-school- 
bus-no-students-seriously/article 1288d946-23be-lle4-9eb3-0017a43b2370.html 

21. August 14, Billings Gazette - (Montana) Wyoming man admits stealing Forest 
Service’s explosives. A Wyoming man admitted August 14 to stealing over 500 
pounds of explosives from a U.S. Forest Service bunker near Red Lodge, Montana, 
while looking for a campground in April 2013. 

Source: http://billingsgazette.com/news/state-and-regional/montana/wyoming-man- 
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admits-stcaling-forcst-scrvicc-s-cxplosivcs/articlc f3473ed2-8bf8-59c4-a0bc- 
el328288ebbc.html 



22. August 14, Sacramento Bee - (California) El Dorado County students on bus escape 
serious injury in suspected DUI head-on crash. Three people, including two 
students, were transported to an area hospital with injuries after a head-on collision 
between a suspected drunk driver and an El Dorado Union High School District bus 
near the town of Somerset August 14. 

Source: http://www.sacbee.com/2014/08/14/6628552/el-dorado-county-students-on- 
bus.html 



23. August 14, Santa Rosa Press Democrat - (California) Mendocino County’s Lodge 
fire now 55 percent contained. Fire crews reached 55 percent containment August 13 
of the 11,900-acre Lodge Fire in Mendocino County and downgraded evacuation 
orders to warnings for several areas near the Eel River. 

Source: http://www.pressdemocrat.com/home/2533209-181/mendocino-county-lodge- 
fire-now 
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Emergency Services Sector 

24. August 15, KOMO 4 Seattle - (Washington) Inmate escapes from minimum-security 
prison near Forks. Authorities are searching for an inmate who escaped from the 
minimum-security Olympic Corrections Center in Washington August 14. Prison 
officials are investigating the circumstances of the inmate’s escape. 

Source: http://www.komonews.com/news/local/Inrnate-escapes-from-minimum- 
security-prison-near-Forks-271388851.html 
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Information Technology Sector 

25. August 15, The Register - (International) Don’t think you’re SAFE from Windows 
zombies just ‘cos you have an iPhone - research. Researchers at the Georgia Institute 
of Technology reported finding that Apple iOS devices can be compromised with iOS 
malware after being connected to a Windows computer by exploiting weaknesses in the 
iTunes syncing process, allowing attackers to steal data, install malicious apps, and 
replace existing apps. The researchers plan to demonstrate their findings August 20 at 
the Usenix Security Symposium. 

Source: http://www.theregister.co.uk/2014/08/15/infecting ipads new how to/ 

26. August 15, SC Magazine - (International) 50% of corporate passwords crackable 
within a few minutes. Trustwave released the results of research that analyzed 620,000 
passwords compiled over 2 years and found that around 50 percent of U.S. corporate 
passwords could be cracked using a brute force method within a few minutes, while 92 
percent could be cracked within 31 days. The research found that a longer password 
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containing only letters took much longer to brute force compared to a shorter password 
that also includes numbers and special characters. 

Source: http://www.scmagazineuk.com/50-of-corporate-passwords-crackable- 
within-a-few-minutes/article/366470/ 



27. August 14, ZDnet - (International) Microsoft’s Visual Studio Online outage hits 
users worldwide. Microsoft’s Visual Studio Online service experienced a service 
interruption across multiple regions for around 9 hours August 14. 

Source: http://www.zdnet.com/microsofts-visual-studio-online-outage-hits-users- 
worldwide-7000032641/ 



For additional stories, see items 3 and 6 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

28. August 15, KUSA 9 Denver - (Colorado) Colorado Sprint customers affected by 
outage. Sprint customers around Colorado reported issues with service including data 
or voice outages and complete blackouts August 15. 

Source: http://www.9news.com/storv/tech/2014/08/15/sprint-outage-affecting- 
colorado/ 14098241/ 
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Commercial Facilities Sector 

29. August 14, San Jose Mercury News - (California) Cupertino: Vallco mall fire quickly 
extinguished, but restaurant suffers water damage. The Dynasty Seafood Restaurant 
at the Vallco Shopping Mall in Santa Clara County was closed indefinitely August 13 
due to damage sustained after a hyrdraulic elevator pump motor overheated and 
sparked a 2-alarm fire inside an elevator room at the mall. 

Source: http://www.mercurynews.com/crime-courts/ci 26336664/cupertino-vallco-fire- 
quickly-extinguished-but-restaurant-suffers 

30. August 14, Billings Gazette - (Montana) Ammonia leak at Centennial Ice Arena 
prompts evacuation. About 50 employees and patrons were evacuated from the 
Centennial Ice Arena in Billings for several hours August 14 due to an ammonia leak 
that originated from a tank inside the facility. Firefighters cut the ammonia supply and 
a HAZMAT team worked to dissipate the fumes. 
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Source: http://billingsgazette.com/news/local/ammonia-leak-at-centennial-ice-arena- 
prompts-evacuation/article c0de0929-8eb8-5bec-b675-f693cb25192d.html 



31. August 14, Fresno Bee - (California) Fire destroys Visalia strip mall, damages 
duplex. Authorities are investigating a 2-alarm fire that damaged 4 of 5 businesses 
located in a strip mall and an adjacent duplex apartment in Visalia August 14. 

Estimated damage totaled about $600,000. 

Source: http://www.mercedsunstar.com/2014/08/14/3795610/fire-destroys-visalia-strip- 
mall.html 



32. August 14, U.S. Department of Labor - (Georgia) Production company for 
"Midnight Rider" film cited for willful and serious safety violations following 
worker fatality and injuries. Pasadena, California-based Film Allman LLC was cited 
by the Occupational Safety and Health Administration for 1 willful and 1 serious safety 
violation after 1 worker was killed and 8 others were injured February 20 when they 
were struck by debris after a CSX Corp. train struck a prop during the filming of a 
movie in Jesup, Georgia. Proposed penalties total $74,900. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS REFEA 
SES&p id=26541 

33. August 14, KJRH 2 Tulsa - (Oklahoma) 16 apartments, 8 vehicles destroyed in 
morning fire at Tahlequah's Pleasant View Apartments. A fire that started in a 
vehicle parked next to a building of the Pleasant View Apartments complex in 
Tahlequah spread to the structure and damaged 16 units, August 14, displacing 35 
residents. 

Source: http://www.kjrh.com/news/local-news/tahlequah/16-apartments-8-vehicles- 
destroyed-in-moming-fire-at-tahlequahs-pleasant- view-apartments 
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Dams Sector 



Nothing to report 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original 
source material. 
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